Deep Freeze Mac Security Notice
Apple provides an application called Open Firmware Password that can be used to ensure that all keys that affect the normal start up of the computer are disabled. This prevents users from pressing the keys necessary to boot into single-user mode or boot from an alternative volume at start up. To download the Open Firmware Password application, refer to Apple’s instructions at:
http://www.apple.com/support/downloads/openfirmwarepassword.html
For Mac OS X 10.4 or later, the updated version of this application can be copied from the software installation disc, located at Applications/Utilities on the disc.
Intel-based Macintosh computers can be protected by firmware passwords as well. The firmware in an Intel-based computer uses Extended Firmware Interface (EFI) technology - Open Firmware is used in computers that use PowerPC processors.
Technical Support
Every effort has been made to design this software for ease of use and to be problem free. If problems are encountered, contact Technical Support:
Email: support@faronics.com
Phone: 800-943-6422 or 604-637-3333
Hours: 7:00 am to 5:00pm (Pacific Time)
Contact Information
Web: www.faronics.com
Email: sales@faronics.com
Phone: 800-943-6422 or 604-637-3333
Fax: 800-943-6488 or 604-637-8188
Hours: 7:00 am to 5:00pm (Pacific Time)
Address: Faronics Technologies USA Inc.
Suite 170 – 2411 Old Crow Canyon Road
San Ramon, CA 94583
USA
Faronics Corporation
620 - 609 Granville St.
Vancouver, BC V7Y 1G5
Canada
Last modified: December, 2008
© 2008 Faronics Corporation. All rights reserved. Deep Freeze, Faronics, Faronics Anti-Executable, Faronics Power Save, Faronics System Profiler, and WINSelect are trademarks and/or registered trademarks of Faronics Corporation. All other company and product names are trademarks of their respective owners.
Deep Freeze Mac Overview
About Deep Freeze
Deep Freeze Mac provides a completely non-restrictive working environment where there is no need to be concerned about system damage or corruption; a simple restart eradicates all changes and ensures that the standard system configuration is available at all times. All changes to a computer are temporary for that working session, including installation or removal of software and application preference configuration. The need for IT professionals to perform rebuilds, re-image, or troubleshoot computers is eliminated, resulting in a reduction in IT expenditures and an increase in computer uptime.
About Apple Remote Desktop (ARD)
Apple Remote Desktop is Apple Computer’s complete desktop management solution for Mac OS X. Faronics does not provide sales or technical support information for Apple Remote Desktop. More information regarding ARD can be found at http://www.apple.com/remotedesktop.
Command Line Control Capability
Tasks referred to in Appendix II for use with ARD can also be used in other third-party command line control programs.
System Requirements
Deep Freeze Mac 4.0 requires Mac OS X Panther v10.3.0 - 10.3.9, Tiger v10.4.1 and up, or Leopard v10.5.0 and up.
Deep Freeze Mac is a Universal application (Intel and PPC compatible).
ARD integration requires Apple Remote Desktop version 2.2 or later.
A minimum of 256 MB RAM is recommended.
Important Terminology
A Frozen volume or partition is completely restored to its exact original configuration and contents upon each restart of the computer.
A Thawed volume partition functions normally, as it would if Deep Freeze was not installed.
About Faronics
Faronics develops and markets intelligent solutions for absolute control of multi-user computing environments. Faronics’ market-leading solutions have dramatically impacted the day-to-day lives of thousands of information technology professionals and computing lab managers by ensuring 100% availability of systems. Our user-driven, powerful technology innovations benefit educational institutions, healthcare facilities, libraries, government organizations and corporations. Incorporated in 1996, Faronics has two offices situated in the USA and Canada. An ambitious growth strategy and global outlook has Faronics striving to reach new markets. Future diversification of Faronics’ utilities will provide innovative and unique solutions that will continue to enhance user productivity.
Installing Deep Freeze
Installation and configuration of Deep Freeze Mac requires administrative access.
Deep Freeze Mac is distributed on a CD-ROM in a media package, or as a downloadable file via the Internet.
Installing Using a Customized Deep Freeze Installer
A customized Deep Freeze Installer pre-configured with up to four usernames/passwords and environment-specific application settings can be created using the Deep Freeze Assistant. Refer to Appendix I for more information.
Installing Using the Basic Deep Freeze Installer
To install Deep Freeze on a single computer, complete the following steps:
|
1.
|
Double-click the file DFX Version.pkg to begin the installation process. (Depending on the configuration, the file extension may not be visible.)
|
|
2.
|
Follow the steps presented, and read and accept the license agreement.
|
|
3.
|
Click Install and Deep Freeze is installed on the computer.
The computer requires a restart to complete the installation.
|
Upon completion of a successful installation and after the computer has been restarted, Deep Freeze is automatically configured to put all drives and partitions into a Frozen state (unless otherwise configured through the Deep Freeze Assistant). Drives and volumes that are to be put in a Thawed state can be specified using the Deep Freeze Controller after the install and restart following the install.
Installing via Apple Remote Desktop
Deep Freeze is distributed as a standard installation package file and can therefore be installed over a network using Apple Remote Desktop’s Install Packages command. Refer to the Apple Remote Desktop user guide for more information. Refer to Appendix II for more information about controlling Deep Freeze over a network using Apple Remote Desktop.
Installing Over Previous Versions
It is recommended that all previous versions of Deep Freeze Mac be uninstalled before installing a newer version.
|
|
Deep Freeze Mac should not be booted in Target Disk Mode when Frozen. The cache files will be invalidated and the program will become corrupt. If booting in Target Disk Mode, ensure the computer is in a Thawed state.
|
Using Xgrid with Deep Freeze Mac
In order for Xgrid to work properly on a Frozen Macintosh, the Xgrid folder must be symlinked to a Thawed partition. When the computer is Thawed the /private/var/xgrid folder must be mapped to a Thawed location (either the Global ThawSpace or a Thawed partition) and then symlinked to its original location.
Use terminal to do the following:
|
•
|
sudo cp -R /private/var/xgrid “some Thawed location” (another partition OR the Global Thawspace)
|
|
•
|
sudo rm -R /private/var/xgrid
|
|
•
|
sudo ln -s “some Thawed location”/xgrid /private/var/xgrid
|
Using the Deep Freeze Controller
If all drives and partitions are Frozen on a computer, a user can create, save, change, and delete files. However, all changes are temporary, unless a ThawSpace or Thawed partition is being utilized. The complete contents of a Frozen drive or volume are restored at restart.
|
|
All changes made in the Deep Freeze Controller only take effect after a restart.
|
Opening the Deep Freeze Controller
Use one of the following three options to open the Deep Freeze Controller:
|
•
|
Browse to Applications > Faronics > DFXControl.app and double-click.
|
|
•
|
Press Ctrl + Opt + Shift + F6.
|
|
•
|
Click the Deep Freeze icon in the menu bar and select Login.
|
Creating the First User
|
1.
|
Unless a Deep Freeze user (DF User) was created using the Deep Freeze Assistant, the first time Deep Freeze Controller is opened, there are no DF Users present. A prompt appears to create a user, as shown:
|
|
2.
|
Click Create DF User. The following dialog appears:
|
|
3.
|
Enter a user name and password, and verify the password.
NOTE: If Apple Remote Desktop (ARD) is going to be used to manage Deep Freeze Mac deployments, ensure that only alpha-numeric characters are used in the password, or the remote tasks will fail.
|
|
4.
|
Click OK to finish creating the first user.
|
|
5.
|
The Deep Freeze Controller screen appears, with seven tabs: Boot Control, Drives, ThawSpace, Maintenance, Mapping, DF Users, and Uninstall.
|
|
|
When opening the Deep Freeze Controller again, the login window appears as shown:
Enter a valid DF User Name and password and click OK.
The Deep Freeze Controller screen appears with the Boot Control tab active.
|
Boot Control Tab
The Boot Control tab is used to change the status of Deep Freeze on a computer.
Use the three radio buttons provided to change the state of Deep Freeze:
|
•
|
To set the computer to a Frozen state, choose Boot Frozen.
|
|
•
|
To set the computer to a Thawed state for a specified number of restarts, choose Boot Thawed on Next and specify the number of restarts (the number entered must be between 1-99).
|
|
•
|
To set the computer to a Thawed state, choose Boot Thawed.
|
To restart the computer after making changes, click Restart.
The following configuration options are available:
|
•
|
To hide the Frozen icon, select the Hide Frozen Icon in menu bar checkbox.
|
|
•
|
To hide the Thawed icon, select the Hide Thawed Icon in menu bar checkbox.
|
|
•
|
To display Frozen partitions without a Deep Freeze icon, select the Don’t badge Frozen partitions checkbox.
|
|
•
|
To set the workstations to restart when a user logs out, select the Restart instead of Log Out checkbox.
|
|
•
|
To display the workstation status (Frozen or Thawed) remotely in Apple Remote Desktop, select the Show Status in Apple Remote Desktop checkbox and select the desired Information Field.
The workstation will now write Frozen or Thawed to the selected Information Field during boot time.
To view this status information in Apple Remote Desktop, select Edit > View Options and select the matching Computer Info Field (1–4). Workstations will now show their current status, and groups of workstations can be sorted by this status column.
|
To save any changes made, click Apply; changes take effect after a restart.
Drives Tab
When the Drives tab is selected, Deep Freeze searches the computer and lists the drives present on a computer. The drives listed can be put into a Frozen state or a Thawed state.
All drives on the computer are initially Frozen by default, unless otherwise specified in the Deep Freeze Assistant (see Appendix I for more information). If you have created a partition to save user data and did not designate it as a Thawed partition in the Assistant, put that partition in a Thawed state by deselecting the corresponding checkbox in the Frozen column.
To save any changes made, click Apply; the changes take effect after a restart.
|
|
Removable media such as external FireWire or USB hard drives or keychain drives are not displayed and can not be Frozen.
|
ThawSpace Tab
The ThawSpace tab is used to create virtual Thawed partitions where documents and changes are retained persistently on Frozen computers. Administrators can create a User ThawSpace for each User, or a Global ThawSpace that all users can share.
Global and User ThawSpaces are easily distinguishable by the icons displayed in the Type column. The
icon represents the Global ThawSpace, and the
icon represents a User ThawSpace.
ThawSpaces can be added or deleted from within the tab using the Add and Delete buttons. ThawSpaces are sized in MB or GB and can range from 1 MB to 120 GB.
The computer must be in a Thawed state to create or modify a ThawSpace. If a ThawSpace was set up using the Deep Freeze Assistant, a dialog (with a progress bar) appears stating that ThawSpaces are being created. A restart is still required to enable these ThawSpaces.
A maximum of one Global and 32 User ThawSpaces can be created on each computer. The User ThawSpaces are visible for mapping purposes.
ThawSpaces appear as removable media on the Desktop. To have User ThawSpaces tagged with the users’ chosen icons, select the Tag User ThawSpace with icon checkbox.
Adding a Global ThawSpace
To create a Global ThawSpace, complete the following steps:
|
1.
|
Click Add. The following dialog appears:
|
|
|
|
2.
|
In the dialog that appears, select Global ThawSpace from the list of User Names.
|
|
3.
|
In the Size field, enter the size of the ThawSpace and use the drop down menu to choose if it is sized in MB or GB. The default size of the Global ThawSpace is 1 GB.
|
|
4.
|
Click Add, or click Cancel to return to the tab without adding the ThawSpace.
|
|
5.
|
In the ThawSpace tab, click Apply to create the new ThawSpace. A dialog prompts for the administrative username and password. Although the ThawSpace may appear on the desktop before a restart, the change will not take effect without a restart.
|
Modifying a Global ThawSpace
To modify a Global ThawSpace, click Add and select Global ThawSpace. Enter the new size of the ThawSpace in the Size field and click Add.
In the ThawSpace tab, click Apply. A dialog prompts for the administrative username and password. The change will take effect on the next restart.
|
|
It is not possible to modify an existing ThawSpace and retain its contents.
|
Adding a User ThawSpace
To create a ThawSpace for a particular user on the drive, complete the following steps:
|
1.
|
Click Add.
|
|
2.
|
In the dialog that appears, select the user that the ThawSpace will be created for.
|
|
3.
|
In the Size field, enter the size of the ThawSpace and use the drop-down menu to choose if it is sized in MB or GB. The default size of the User ThawSpace is 10 MB.
|
|
4.
|
Click Add, or click Cancel to return to the tab without adding the ThawSpace.
|
|
5.
|
In the ThawSpace tab, click Apply to create the new ThawSpace. A dialog prompts for the administrative username and password. Although the ThawSpace may appear on the desktop before a restart, the change will not take effect without a restart.
|
|
|
If a new ThawSpace is added for a user who already has an existing ThawSpace, the contents of the previous ThawSpace will be deleted.
|
Modifying User ThawSpaces
To modify a User ThawSpace, click Add and select the name of the ThawSpace to be modified. Enter the new size of the ThawSpace in the Size field and click Add.
In the ThawSpace tab, click Apply. A dialog prompts for the administrative username and password. The change will take effect on the next restart.
|
|
It is not possible to modify an existing ThawSpace and retain its contents. Removing a ThawSpace that has a user mapped to it will prevent the user from logging on to the computer. It is recommended that the user be mapped to an alternate location before the ThawSpace is removed.
|
Removing a User or Global ThawSpace
To remove a User or Global ThawSpace, complete the following steps:
|
1.
|
Select the ThawSpace to be deleted and click Delete.
A dialog appears, asking for confirmation of the deletion.
|
|
2.
|
Click Delete to permanently delete the ThawSpace or Cancel to return to the tab with the ThawSpace retained.
|
|
3.
|
Click Apply. A dialog prompts for the administrative username and password. The change will take effect on the next restart.
|
Alternatively, Deep Freeze Mac can be uninstalled in order to remove any ThawSpaces.
|
|
If a user unmounts the ThawSpace virtual drive, it is restored upon log out/log in or restart. On a Frozen workstation, if a ThawSpace is physically deleted, the ThawSpace is restored upon restart but the contents are deleted.
|
Maintenance Tab
The Maintenance tab is used to schedule a Maintenance Period when the computer will be automatically Thawed to allow Apple Software Updates to be permanently applied.
Creating and Naming Multiple Maintenance Schedules
To create multiple individually named Maintenance Schedules, complete the following steps:
|
1.
|
On the Maintenance Tab, click Add.
The default Schedule 1 tag appears in the list on the left side of the tab. Each additional schedule added will have that default tag, but can be renamed.
|
|
2.
|
To rename a schedule, double-click the tag to be renamed.
The field becomes editable.
|
|
3.
|
Enter the new schedule name.
NOTE: Up to 10 individually named Maintenance Schedules can be created.
|
Configuring and Editing Maintenance Schedules
To configure a schedule, click the name of the schedule to be configured.
Then choose from the following options to configure the Maintenance Schedule:
|
•
|
To turn the Maintenance Period on, click the Activate Maintenance Schedule option.
|
|
•
|
From the Day drop-down menu, select a day of the week when the schedule will occur.
|
|
•
|
Use the From and To fields to enter the period of time that the Maintenance will occur.
|
|
•
|
Select the Once Only checkbox to create a one-time only schedule; if this checkbox is not selected, the schedule recurs on a weekly basis.
|
|
•
|
Select Install Apple Software Updates to install any available Apple Software Updates.
|
|
•
|
Select Lock Out User to prevent a user from accessing the computer during the Maintenance Period.
|
|
•
|
Select Warn User At to provide a message to users warning them that the computer will be taken over at a specified time, and enter the warning time in the field provided.
|
|
•
|
Use the Message for User text box to enter a custom message for the user, explaining that the Maintenance Schedule will take place at a specified time; by inserting %d as a variable into the message, Deep Freeze will automatically display the number of minutes until the Maintenance Period begins. (Again, %d is a variable corresponding to the number of minutes between the current time and the time that scheduled Maintenance will begin.)
|
|
•
|
Select Shutdown After Maintenance to shut the computer down after the Maintenance Period is complete.
|
The minimum time allowed for a Maintenance Period is 10 minutes.
To save any changes made, click Apply; the changes take effect after a restart.
Mapping Tab
The Mapping tab is used to map the user’s home folder to a specific ThawSpace or partition, or to map elements of a user’s home folder to a specific ThawSpace or partition.
NOTE: This feature is only available at the administrator level. The current logged in user can not be mapped. The computer must be restarted for the changes to take effect.
To map a user’s home folder to a target destination, select the user’s account and under User Location select one of the options available: Boot Volume, User ThawSpace, Partition, or Custom.
|
Boot Volume
|
This option maps the user account to the volume the operating system is booted from.
|
|
User ThawSpace
|
This option maps the user account to the corresponding User ThawSpace created for this user. It is not recommended that User ThawSpaces be renamed because a renamed ThawSpace will prevent access from the original user account.
|
|
Partition
|
The user account can be mapped to a specific partition listed in the Drives tab.
|
|
Custom
|
This option lets certain elements (pictures, movies and, music, etc.) of a user account be mapped to the User ThawSpace/Partitions. To do this, click on the element and select the ThawSpace/Partition that it will be mapped to. Custom mapped users must be located on the boot volume. Users can not be mapped entirely to their User ThawSpace/any other volume and then partially custom mapped to another location.
For bookmarks, the location must exist to be mapped; e.g. if a user has never run Safari, it can not be mapped. Deep Freeze does not create the folders and bookmarks for a user.
|
|
|
If an attempt to map to a location with insufficient space is made, the mapping action will not take place.
|
DF Users Tab
The DF Users tab allows administrators to manage the Deep Freeze users present on a computer. There are a maximum of four users permitted on each computer, but only the first user (the admin user) can create, edit, and delete other DF Users.
Adding, Deleting, and Editing DF Users
To add a new user, complete the following steps:
|
1.
|
Click Add. A properties dialog appears, as shown.
|
|
2.
|
Enter the DF User Name and Password and verify the password.
NOTE: If Apple Remote Desktop (ARD) is going to be used to manage Deep Freeze Mac deployments, ensure that only alpha-numeric characters are used in the password or the remote tasks will fail.
|
|
3.
|
Click OK to save the changes to the user profile, or click Cancel to exit with no changes saved.
|
To delete a DF User, click Delete. A dialog appears asking for confirmation of the deletion. Click Cancel to exit the dialog, or click Delete to delete the DF User permanently. There must always be at least one DF User present; the first DF User created can not be deleted.
To edit the properties of a DF User, click Edit. Edit the User Name and Password in the properties dialog as needed.
Uninstall Tab
A computer must be in a Thawed state for the Uninstall option to be available. If the computer is in a Frozen state, the Uninstall option is not available.
If there are existing ThawSpaces on a computer, choose either to retain or delete them by selecting the preferred button.
If the option to retain ThawSpaces is chosen, all existing ThawSpaces are moved to the boot volume (/Volumes/username.dmg). To access the boot volume, launch the Terminal and change the directory to the boot volume /Volumes/username.dmg. ThawSpaces must be mounted manually by double-clicking the icon.
To uninstall Deep Freeze, click Uninstall.
The computer restarts and Deep Freeze is uninstalled.
|
|
All program components are permanently deleted when Deep Freeze is uninstalled.
|
Exporting and Importing Configurations
A file containing the configuration information set in the Deep Freeze Controller can be exported as a property list file. The property list can be imported into another Deep Freeze Controller and deployed to targeted computers.
To export the configurations set in the Deep Freeze Controller, click Export and save the file to a preferred location.
To import a configuration file, click Import and browse to the location of the saved file. The computer must be restarted for any changes to take effect from the imported file.
NOTE: Drives, ThawSpace, and mapping pages are not exported or imported since they are not relevant to other computers.
Using Deep Freeze
After Deep Freeze has been installed and a configuration has been assigned to a partition, the computer can be operated as usual. The only visual evidence that Deep Freeze is installed on a computer are the presence of a Deep Freeze icon in the menu bar (if configured), the Deep Freeze icon badge on each Frozen volume (if configured), or any configured Global or User ThawSpaces.
Users can make changes to the computer, including renaming or deleting files and folders, downloading files from the Internet, changing the desktop, and more. However, the Frozen volumes are completely restored to their original configurations and contents at restart.
Deep Freeze Icons
When Deep Freeze is installed, the polar bear icon appears in the menu bar, if the icon has been configured to appear:
The Frozen polar bear icon 
indicates that the computer is currently Frozen.
The Thawed polar bear icon 
indicates that the computer is currently Thawed.
Saving Documents
On a computer that is Frozen, a user can permanently save documents to a Thawed volume on the computer, a Global or User ThawSpace, a network location, or onto a CD, USB keychain drive, or FireWire hard drive.
Software Installation and Permanent Changes
Permanent changes and software installations can only be made to a Thawed computer, a Thawed volume, or a ThawSpace on the computer. If a computer is in a Frozen state, any software that has been installed will be gone after a restart.
A newly installed application should be run at least once while the computer or volume is Thawed in order to create a preference file, dismiss registration dialogs, and initialize various values.
A newly installed application may require the computer to be restarted for setup to be completed. If this is the case, it is recommended to restart the computer in a Thawed state, and then log in with the same user account, run the application once, and then log out before setting the computer to restart in a Frozen state.
Checking for Deep Freeze Updates
To check if the installed version of Deep Freeze is the most current one, select Help > Check For Updates.
The default browser loads, stating if the installed version is up to date or if there is a more current one available for download. Follow the links as applicable.
NOTE: Check whether the installed version is current via the ARD console by using the checkForUpdates task.
Appendix I: Deep Freeze Assistant and Customizing the Installer
The Deep Freeze Assistant can be used to create customized Deep Freeze installation packages and allows you to create global settings for a multiple workstation environment.
The Deep Freeze Assistant can also directly install Deep Freeze specific Saved Tasks into the Apple Remote Desktop (ARD) console on the current system. ARD tasks are not part of the customized Deep Freeze installation package. ARD must not be running in order for the task installation to be successful.
To run Deep Freeze Assistant, complete the following steps:
|
1.
|
Double-click the program icon to open the Deep Freeze Assistant. The Introduction screen appears, as shown:
|
|
2.
|
Click Continue. The Deep Freeze Tasks screen appears:
|
|
3.
|
Select the checkbox marked Yes, Install Tasks to install the Deep Freeze specific tasks into ARD on the current computer. If ARD or the ARD Agent is running, a dialog appears giving the option to quit ARD immediately or at a later time.
|
|
Old Deep Freeze ARD tasks should be deleted before installing new ones with the Deep Freeze Assistant to avoid any possible execution issues.
|
Choose the preferred action, and click Continue. The Deep Freeze Custom Installer screen appears:
|
|
4.
|
To create a custom client installer, select Yes, Create a custom installer and click Continue.
The Deep Freeze Administrator screen appears:
|
|
5.
|
Enter the name and password of the Deep Freeze Administrator to be created by the custom installer and used by Deep Freeze’s Apple Remote Desktop tasks. Retype the password to verify it and click Continue.
NOTE: If Apple Remote Desktop (ARD) is going to be used to manage Deep Freeze Mac deployments, ensure that only alpha-numeric characters are used in the password, or the remote tasks will fail.
|
|
6.
|
A dialog appears, asking if you wish to create another user or to continue. Once you have finished creating up to four users, the Boot Control & Miscellaneous screen appears:
|
|
7.
|
The Boot Control & Miscellaneous screen contains buttons used to change the status of Deep Freeze on the computer(s) on which the installer will be applied:
|
•
|
To set the computer(s) to a Frozen state, choose Boot Frozen.
|
|
•
|
To set the computer(s) to a Thawed state for a specified number of restarts, choose Boot Thawed on Next and specify the number of restarts (the number entered must be between 1-99).
|
|
•
|
To set the computer(s) to a Thawed state, choose Boot Thawed.
|
|
•
|
To designate up to four known partitions on the computer(s) as Thawed, enter their names in the fields provided below Thaw these Partitions:. Only named partitions that exist on a computer will be Thawed upon install.
|
As well, the following computer configuration options are available:
|
•
|
To hide the Frozen icon, select the Hide Frozen Icon in menu bar checkbox.
|
|
•
|
To hide the Thawed icon, select the Hide Thawed Icon in menu bar checkbox.
|
|
•
|
To display Frozen partitions without a Deep Freeze icon, select the Don’t badge Frozen partitions checkbox.
|
|
•
|
To set the computer(s) to restart when a user logs out, select the Restart instead of Log Out checkbox.
|
|
•
|
To display the workstation status (Frozen or Thawed) remotely in Apple Remote Desktop, select the Show Status in Apple Remote Desktop checkbox and select the desired Information Field.
|
|
|
|
|
|
The workstation will now write Frozen or Thawed to the selected Information Field during boot time.
To view this status information in Apple Remote Desktop, select Edit > View Options and select the matching Computer Info Field (1–4). Workstations will now show their current status, and groups of workstations can be sorted by this status column.
|
|
If designating ThawSpace(s) in the install package, ensure that Boot Control is set to Boot Thawed, so the ThawSpace(s) can be created.
|
Click Continue. The ThawSpace screen appears:
|
|
|
8.
|
The ThawSpace screen is used to create a virtual Thawed partition where documents and changes are retained persistently. Administrators can create a User ThawSpace for each local user, or a Global ThawSpace that all users can share.
Computers must be in a Thawed state to create a ThawSpace; for your install package, set the Boot Control setting to Boot Thawed.
To create a Global ThawSpace, click the Create Global ThawSpace of checkbox and enter the preferred size of the ThawSpace.
To create a ThawSpace for each user, click Create a ThawSpace for each user of checkbox and enter the preferred size of the ThawSpace.
ThawSpaces appear as removable media on the Desktop. To have User ThawSpaces tagged with the users’ chosen icons, select the Tag User ThawSpace with icon checkbox.
Click Continue. The User Mapping screen appears:
|
|
|
|
|
9.
|
The User Mapping tab is used to map types of a user’s home folder to a specific ThawSpace.
Use the drop-down menus to map Standard, Admin, or Mobile user’s home folder to either a partition or a User ThawSpace.
|
|
|
Mapping is done on a per user basis. It is possible to have some users mapped while others fail. Failure can occur as a result of one or more of the following:
|
|
|
The destination already exists.
|
|
|
The destination does not have sufficient space.
Attempts to map using the ARD may also fail due to the destination existing but not being mounted at that time. A destination that has room for one user may not have room for all users, and in this case, some of the users may be copied to the destination while others are not.
Click Continue. The Maintenance screen appears:
|
|
10.
|
To create multiple individually named Maintenance Schedules, click Add. The default Schedule 1 tag appears in the list on the left side of the tab. Each additional Schedule added has that default tag, but can be renamed. To rename a Schedule, double-click the tag to be renamed and edit the field.
NOTE: up to 10 individually named Maintenance schedules can be created.
To configure a schedule, click the name of the Schedule to be configured. Choose from the following options to configure the Maintenance Schedule:
|
|
|
•
|
To turn the Maintenance Schedule on, click Activate Maintenance Schedule.
|
|
|
•
|
From the Day drop-down menu, select a day of the week that the Schedule will occur.
|
|
|
•
|
Use the From and To fields to enter the period of time that Schedule will occur.
|
|
|
•
|
Select the Once Only checkbox to create a one-time only Schedule; if this box is not selected, the schedule will recur on a weekly basis.
|
|
|
•
|
Select Install Apple Software Updates to automatically perform Apple Software Updates during the Maintenance Schedule.
|
|
|
•
|
Select Lock Out User to prevent user access during the scheduled updates.
|
|
|
•
|
Select Warn User At to provide a message to users warning them that the computer will be taken over at a specified time, and enter the specified time in the field provided.
|
|
|
•
|
Use the Message for User field to enter a custom message for the user, explaining that the Maintenance Schedule will take place at a specified time; by inserting %d as a variable into your message, Deep Freeze will automatically display the number of minutes until the Maintenance Period begins. (%d is a variable corresponding to the number of minutes between the current time and the time that scheduled Maintenance will begin.)
|
|
|
•
|
Click Shutdown After Maintenance to shut the computer down after the Maintenance Period is complete.
|
|
|
NOTE: The minimum time allowed for a Maintenance Period is 10 minutes.
Click Continue. The Choose Deep Freeze Installer screen appears:
|
|
11.
|
Click Choose and browse to the location of the Deep Freeze installer package (.pkg extension) that exists in the Deep Freeze folder. Alternatively, drag and drop the package file into the Choose dialog screen.
Click Continue. The Where to Save screen appears.
|
|
12.
|
Click Choose. A standard Save dialog appears. Browse to a location to save the custom client installer and select it. Alternatively, drag and drop the preferred save location into the Choose dialog screen.
Click Continue.
The final screen appears, stating that the custom client installer was successfully created and that the Deep Freeze tasks were installed into ARD.
Click Quit to close the Deep Freeze Assistant.
|
Appendix II: Apple Remote Desktop v.3.0 Integration
Deep Freeze Assistant can install tasks for use with Apple Remote Desktop. These tasks can be used as supplied or as a starting point for controlling Deep Freeze with ARD. In ARD 2.2, the Deep Freeze-specific tasks are saved in the Saved Tasks folder, not in a named folder.
The functions of each task are identical to the functions described below. Each task can be configured in the Deep Freeze Controller, except for RequestStatus.
The following new commands and arguments are available in this release:
|
Task (Command)
|
Argument
|
Function
|
|
activateSchedule
|
Schedule name
|
Activates the scheduled updates on target computer(s); name of the schedule must be included in the command as a parameter.
|
|
addUser
|
New user name
|
Adds user to list.
|
|
badgeFrozenPartitions
|
on|off
|
Shows/Hides Deep Freeze icon on Frozen partitions.
|
|
bootFrozen
|
|
Sets target computer(s) to restart in a Frozen state.
|
|
bootThawed
|
|
Sets target computer(s) to restart in a Thawed state.
|
|
bootThawedFor
|
Times
|
Sets target computer(s) to restart in a Thawed state for the next x restarts; this number can be customized in the Times argument.
|
|
checkForUpdates
|
|
Checks whether the present version of Deep Freeze on the target computer(s) is the most current.
|
|
createThawspace
|
|
Creates virtual partition on a Frozen volume where data can be saved persistently across restarts*.
|
|
deactivateSchedule
|
Schedule name
|
Deactivates the scheduled updates on target computer(s); name of the schedule must be included in the command as an argument.
|
|
deleteUser
|
User name
|
Deletes user from list.
|
|
editUser
|
User name
|
Allows administrators to edit the name and password of a user
|
|
freezePartition
|
Partition name
|
Designates a partition on target computer(s) to be Frozen.
|
|
getARDInfoField
|
|
Specifies which Apple Remote Desktop’s information field is used to display the workstation status.
|
|
mapAllUsers
|
(Argument 1)
admin|standard|mobile
(Argument 2)
Partition name|
userthawspace
|
Maps all users to a specified ThawSpace: name of user type and location of ThawSpace must be included as a parameter; e.g. admin Panther maps all admin users to the partition named Panther.**
|
|
rebootInsteadOfLogoff
|
on|off
|
Restarts target computer(s) instead of logging off when the on argument is used. This feature is turned off when the off argument is used.
|
|
removeThawSpace
|
ThawSpace name|global
|
Removes a single ThawSpace***
|
|
removeAllThawSpace
|
|
Removes all ThawSpaces present
|
|
setARDInfoField
|
ARD Info Field
|
This parameter is used to specify which Remote Desktop’s Information Field is used to display the workstation status. The parameter value is 0 to 4, 0 is to unset the Information Field.
|
|
showFrozenIcon
|
on|off
|
Configures target computer(s) to show/hide the Deep Freeze Frozen icon in the menu bar.
|
|
showThawedIcon
|
on|off
|
Configures target computer(s) to show/hide the Deep Freeze Thawed icon in the menu bar.
|
|
status
|
[-x]
|
Requests target computer(s) to display the status of various Deep Freeze settings. x specifies that the result is in XML format.
|
|
tagUserThawSpaces
|
on|off
|
Tags User ThawSpaces (if configured) with user icons/removes Tags from User ThawSpaces. This option must be used before the ThawSpace is created; user icon tags can not be added after creation.
|
|
thawPartition
|
Partition name
|
Designates a partition on target computer(s) to be Thawed.
|
|
uninstall
|
|
Uninstalls Deep Freeze from target computer(s). The target computer(s) must be restarted in the Boot Thawed state before the uninstall task can be run.
|
|
uninstall
|
[keepThawSpace]
|
Uninstalls Deep Freeze from target computer(s) but retains ThawSpaces
|
|
version
|
[-x]
|
Displays Deep Freeze version number. x specifies that the result is in XML format.
|
* = This only occurs during the first DeepFreeze installation using the settings provided by the custom installer created by Deep Freeze Assistant.
**= The mapAllUsers command also includes the parameters: “admin”, “standard”, “mobile”, “userthawspace” and, partition name such as “Macintosh HD” or “Panther”.
***= The single Thawspace “name” must be specified as well as “global” for a Global Thawspace.
Adding Targeted Computers to the Task List
In order to run a task, there must be computers targeted to run the task. To add one or more computers to be targeted to run the task, complete the following steps:
|
1.
|
In the left column, double-click the task to be targeted to the specified computers.
The Task Edit window appears. At the bottom of the window is a dialog listing the designated computers assigned to the task. Before a computer is added to the list, it reads No Computers.
|
|
2.
|
Drag and drop the preferred workstations or group of workstations into the dialog from the computers in the All Computers list. The number of computers assigned to a specific task appears at the bottom of the window.
|
|
3.
|
Click Save.
|
Using and Editing Tasks
To use the tasks, they must be edited to add site-specific information, e.g. usernames and passwords.
The following conditions and settings must apply for ARD to perform the tasks:
|
•
|
The target computer(s) for the task must be specified.
|
|
•
|
The target computer(s) must have Deep Freeze installed.
|
|
•
|
A user on the target computer must be specified to run the command.
|
The following figure shows the sample output from the Status function.
NOTE: The Display all output checkbox must be selected in the Apple Remote Desktop Edit Task window in order to show the target’s status.
The following figure shows the activateSchedule task set to run as the current console user on the target computer:
Each task must be edited to use a Deep Freeze user name and password for the target computer(s). In the above example, admin is the Deep Freeze user name and admin is the Deep Freeze password. The name and password may already be present in the task, depending on the settings that were specified in Deep Freeze Assistant.
|
|
The following tasks must run as root on the target computer. Otherwise, insufficient permissions will cause the task to fail.
|
|
•
|
checkForUpdates
|
•
|
removeAllThawSpace
|
|
•
|
createThawspace
|
•
|
status
|
|
•
|
mapAllUsers
|
•
|
uninstall keepThawspace
|
|
•
|
removeThawSpace
|
•
|
uninstall
|
Sample Command Line Scripts
The Deep Freeze Mac tasks give network administrators increased flexibility when managing Deep Freeze Mac workstations. These tasks can be run with several different third-party enterprise management tools and/or central management solutions; this includes executing commands in Terminal while connected to a remote workstation via SSH.
A sample script using the bootFrozen command is shown below:
DFXPSWD=”password” /Library/Application\ Support/Faronics/Deep\ Freeze/ deepfreeze -u “admin” -p bootFrozen
In this example, administrator is the name of a valid Deep Freeze Mac user and password is that user’s password. The sample script can be modified to run any task listed in the Task table.
Deep Freeze Legacy Commands
In the current version of Deep Freeze Mac, the CLI has been changed to provide new commands and arguments. Tasks from previous versions of Deep Freeze Mac appear under the Deep Freeze Legacy folder in ARD.
The commands in the Deep Freeze Legacy folder have been retained for backward compatibility. However, these commands will be removed entirely in a future version.
The following commands are deprecated in the current release:
|
Task (Command)
|
Function
|
|
activateSchedule
|
Activates the scheduled updates on target computer(s); name of the schedule must be included in the command as a parameter
|
|
addUser
|
Adds user to list
|
|
badgeFrozenPartitions
|
Badges Frozen partitions with Deep Freeze icon
|
|
bootFrozen
|
Sets target computer(s) to restart in a Frozen state
|
|
bootThawed
|
Sets target computer(s) to restart in a Thawed state
|
|
bootThawedFor 5
|
Sets target computer(s) to restart in a Thawed state for the next 5 restarts; this number can be customized in the Task Edit window
|
|
checkForUpdates
|
Checks whether the present version of Deep Freeze on the target computer(s) is the most current
|
|
createThawspace
|
Creates virtual partition on a Frozen volume where data can be saved persistently across restarts*
|
|
deactivateSchedule
|
Deactivates the scheduled updates on target computer(s); name of the schedule must be included in the command as a parameter
|
|
deleteUser
|
Deletes user from list
|
|
dontBadgeFrozenPartitions
|
Hides Deep Freeze icon on Frozen partitions (if configured)
|
|
dontRebootInsteadOfLogoff
|
Restarts target computer(s)
|
|
dontTagUserThawSpaces
|
Prevents user icons from appearing as tags on User ThawSpaces (if configured); this option must be used before the ThawSpace is created; user icon tags can not be removed after creation
|
|
editUser
|
Allows administrators to edit the name and password of a user
|
|
freezePartition
|
Designates a partition on target computer(s) to be Frozen
|
|
hideFrozenIcon
|
Configures target computer(s) to hide the Deep Freeze Frozen icon in the menu bar
|
|
hideThawedIcon
|
Configures target computer(s) to hide the Deep Freeze Thawed icon in the menu bar
|
|
mapAllUsers
|
Maps all users to a specified ThawSpace: name of user type and location of ThawSpace must be included as a parameter; e.g. “admin” “Panther” maps all admin users to the partition named Panther.**
|
|
rebootInsteadOfLogoff
|
Restarts target computer(s) instead of logging off
|
|
removeThawSpace
|
Removes a single ThawSpace***
|
|
removeAllThawSpace
|
Removes all ThawSpaces present
|
|
showFrozenIcon
|
Configures target computer(s) to display the Deep Freeze Frozen icon in the menu bar
|
|
showThawedIcon
|
Configures target computer(s) to display the Deep Freeze Thawed icon in the menu bar
|
|
status
|
Requests target computer(s) to display the status of various Deep Freeze settings
|
|
tagUserThawSpaces
|
Tags User ThawSpaces (if configured) with user icons; this option must be used before the ThawSpace is created; user icon tags can not be added after creation
|
|
thawPartition
|
Designates a partition on target computer(s) to be Thawed
|
|
uninstall
|
Uninstalls Deep Freeze from target computer(s). The target computer(s) must be restarted in the Boot Thawed state before the uninstall task can be run
|
|
uninstall keepThawspace
|
Uninstalls Deep Freeze from target computer(s) but retains ThawSpaces
|
|
version
|
Displays Deep Freeze version number
|
